Sophos MDR identifies a new threat cluster riffing on the playbook of Storm-1811, and amped-up activity from the original connected to Black Basta ransomware.

Open-source intelligence reveals the server-side code of this pernicious SEO-driven malware - without needing a lawyer afterward

Brace yourselves... and consider reading your email in plaintext for now

In the second of a two-part series on tools and frameworks designed to help with remediation prioritization, we explore some alternatives to CVSS

In the first of a two-part series exploring tools and frameworks which can help organizations with remediation prioritization, Sophos X-Ops takes a look at the Common Vulnerability Scoring System (CVSS)

A sudden disruption of a major phishing-as-a-service provider leads to the rise of another…that looks very familiar 

A sea change in available data fuels fresh insights from the first half of 2024

After January’s deluge, a calmer update volume returns

The SVG file format can harbor malicious HTML, scripts, and malware

A year after our initial research on threat actors’ attitudes to generative AI, we revisit some underground forums and find that many cybercriminals are still skeptical – although there has been a slight shift